<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wpfunnels</title><description>Every new CVE for wpfunnels.</description><link>https://agentprime.io/</link><item><title>CVE-2026-27062: WordPress WPFunnels plugin &lt;= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-27062/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27062/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 14:38:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-118088: WordPress WPFunnels plugin &lt;= 3.13.5 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-118088/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-118088/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 14:26:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-118091: WordPress WPFunnels plugin &lt;= 3.13.5 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-118091/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-118091/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 14:23:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62029: WordPress WPFunnels plugin &lt;= 3.13.3 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-62029/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62029/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 12:04:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97269: WordPress WPFunnels plugin &lt;= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-97269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97269/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2026 14:33:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97271: WordPress WPFunnels plugin &lt;= 3.13.1 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-97271/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97271/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Sep 2026 12:28:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27371: WordPress WPFunnels plugin &lt;= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-27371/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27371/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Sep 2026 12:26:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79632: WPFunnels &lt; 3.13.0 - Unauthenticated Arbitrary Recipient Email Sending via wpfnl_shortcode_optin_submission</title><link>https://agentprime.io/advisories/CVE-2026-79632/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79632/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:00:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79631: WPFunnels &lt; 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files</title><link>https://agentprime.io/advisories/CVE-2026-79631/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79631/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:00:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-79630: WPFunnels &lt; 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID Substitution</title><link>https://agentprime.io/advisories/CVE-2026-79630/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-79630/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:00:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15691: WPFunnels &lt; 3.13.0 - Unauthenticated User Registration via Opt-in Forms</title><link>https://agentprime.io/advisories/CVE-2025-15691/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15691/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 06:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84754: WordPress WPFunnels plugin &lt;= 3.12.13 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-84754/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84754/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Sep 2026 16:31:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-67571: WordPress WPFunnels plugin &lt;= 3.6.2 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-67571/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67571/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 14:14:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54696: WordPress WPFunnels plugin &lt;= 3.5.26 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-54696/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54696/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Aug 2025 10:34:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47530: WordPress WPFunnels plugin &lt;= 3.5.18 - PHP Object Injection Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-47530/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47530/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 May 2025 12:43:32 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-27965: WordPress WPFunnels plugin &lt;= 3.0.6 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-27965/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-27965/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 21 Mar 2024 16:38:15 GMT</pubDate><category>CVE</category></item></channel></rss>